fix: security hardening for SQL query API#81

Merged

jxom merged 6 commits intomainfrom

jxom/security-hardening

Feb 11, 2026

Commits on Feb 6, 2026

fix: replace string-based SQL injection in inject_block_filter with AST manipulation

gakonst
and
ampcode-com
committed
fix: add table allowlist to query validator and read-only API role

gakonst
and
ampcode-com
committed
fix: close DoS, privilege escalation, and file read bypass vectors

gakonst
and
ampcode-com
committed

Commits on Feb 10, 2026

fix: replace function blocklist with allowlist and harden API role

gakonst
and
ampcode-com
committed
fix: reject-by-default expression validation, LIMIT/depth/size caps

gakonst
and
ampcode-com
committed
fix: close FILTER clause bypass, LIMIT NULL, FETCH, negative limit

gakonst
and
ampcode-com
committed